Re: [Lxc-users] lxc-net.conf on ubuntu

2012-09-05 Thread Serge Hallyn
Quoting groupie (stopmakingse...@gmx.de): Hi Fajar, On 02.09.2012 12:44, Fajar A. Nugraha wrote: iptables -A POSTROUTING -s ${LXC_NETWORK} ! -d ${LXC_NETWORK} -t nat -j MASQUERADE This one I really do like! Smart! :) Thanks for bringing this up, guys. We've opened a bug and

[Lxc-users] lxc-net.conf on ubuntu

2012-09-02 Thread groupie
Hi list! I just came over the fact that the iptables config set in the lxc-net upstart job does also rewrite connections between hosts on the bridge. I added a rule before the masquerade to prevent this and make sure, that hosts on the same net bound to the bridge can talk without rewriting.

Re: [Lxc-users] lxc-net.conf on ubuntu

2012-09-02 Thread Fajar A. Nugraha
On Sun, Sep 2, 2012 at 4:56 PM, groupie stopmakingse...@gmx.de wrote: Hi list! I just came over the fact that the iptables config set in the lxc-net upstart job does also rewrite connections between hosts on the bridge. I added a rule before the masquerade to prevent this and make sure, that

Re: [Lxc-users] lxc-net.conf on ubuntu

2012-09-02 Thread groupie
Hi Fajar, On 02.09.2012 12:44, Fajar A. Nugraha wrote: iptables -A POSTROUTING -s ${LXC_NETWORK} ! -d ${LXC_NETWORK} -t nat -j MASQUERADE This one I really do like! Smart! :) Cheers, Groupie -- Live